Description
Darren's $5 Script Archive osDate 1.1.7 and earlier allows users to boost their own ratings via a txtrating parameter with a score greater than the intended maximum of 10.
References
- 20060813 osDate 1.1.8 - Multiple HTML Injection Vulnerability - fixed mailing-list
- 1016700 vdb-entry
- 20060719 Re: osDate 1.1.7 multiple vulnerabilities mailing-list
- 20060717 osDate 1.1.7 multiple vulnerabilities mailing-list